CVE-2026-19983 - A vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE

CVE-2026-19982 - A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability af

CVE-2026-19981 - A weakness has been identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE

CVE-2026-19980 - A security flaw has been discovered in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE930

CVE-2026-19979 - A vulnerability was identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE

CVE-2026-19978 - A flaw has been found in jiantao88 android-mcp-server up to cfb872b2446794193b58edd63f4dbf6af48a6292

CVE-2026-50602 - A security vulnerability has been identified in Planet9 due to incorrect file permissions assigned t

CVE-2026-50601 - A security vulnerability has been identified in the Planet9 desktop application where a hardcoded re

CVE-2026-19977 - A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function http

CVE-2026-19976 - A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub_

CVE-2026-19975 - A weakness has been identified in Azuriom CMS up to 1.2.12. This issue affects the function transfer

CVE-2026-19974 - A security flaw has been discovered in treefrogframework treefrog-framework up to 2.11.2. This vulne

CVE-2026-19973 - A vulnerability was found in itsourcecode Hospital Management System 1.0. Affected by this vulnerabi

CVE-2026-19972 - A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknow

CVE-2026-19971 - A flaw has been found in LB-Link WR1210M 1.0.3. This impacts the function main of the file /www/cgi-

CVE-2026-19970 - A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function

CVE-2026-19969 - A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted

CVE-2026-19968 - A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is

CVE-2026-19967 - A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the fun

CVE-2026-19966 - A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affe

CVE-2026-19965 - A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the functi

CVE-2026-19964 - A vulnerability was found in Jij-Inc Jij-MCP-Server 0.1.0. This affects the function PythonREPL.run

CVE-2026-19963 - A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function sta

CVE-2026-19962 - A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setW

CVE-2026-19961 - A vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey of

CVE-2026-19960 - A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function form

CVE-2026-19959 - A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetu

CVE-2026-19958 - A security flaw has been discovered in iatsiuk pptr-mcp up to 0.2.7. The impacted element is the fun

CVE-2026-19957 - A vulnerability was identified in graphlit graphlit-mcp-server 1.0.1. This affects the function fetc

CVE-2026-19956 - A vulnerability has been found in gomarble-ai facebook-ads-mcp-server 0.1.0. The impacted element is

CVE-2026-19955 - A vulnerability was detected in TrailDB 0.6. Impacted is the function tdb_open of the file /src/tdb.

CVE-2026-74797 - OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init command w

CVE-2026-74796 - OpenTofu before 1.11.7 fails to validate existing symlinks in the provider cache directory during in

CVE-2026-74795 - Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parse

CVE-2026-74794 - Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the Objec

CVE-2026-74792 - Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack overflow vulnerability in nested

CVE-2026-74791 - Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is c

CVE-2026-74790 - Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter change

CVE-2026-74789 - Scriban before 7.0.0 (affected <= 6.6.0) applies its LoopLimit constraint only to script loop statem

CVE-2026-74788 - Scriban before 7.0.0 (affected versions <= 6.6.0) contains an uncontrolled memory allocation vulnera

CVE-2026-74787 - Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.to_json builtin

CVE-2026-74786 - Scriban before 7.0.0 (affected versions <= 6.6.0) contains a denial-of-service vulnerability in whic

CVE-2026-74785 - Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression evaluat

CVE-2026-74784 - Scriban before 7.2.0 contains a denial of service vulnerability in the array.insert_at function that

CVE-2026-74783 - Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit guard that fails t

CVE-2026-73062 - Scriban versions 3.0.0 through 7.2.0 contain a denial of service vulnerability in the array multipli

CVE-2026-73061 - Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that al

CVE-2026-73060 - Scriban versions from 3.0.0 through 7.2.5 contain a denial of service vulnerability in the ScriptRan

CVE-2026-73059 - stoatchat before 0.15.0 contains a permission bypass vulnerability in the message_fetch route that c

CVE-2026-73058 - stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF blockli

CVE-2026-73057 - stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing att

CVE-2026-73056 - SiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication atte

CVE-2026-72888 - Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed mod

CVE-2026-72887 - Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OA

CVE-2026-19349 - Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 befo

CVE-2024-58375 - OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when u

CVE-2026-74251 - Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.

CVE-2026-74578 - In the Linux kernel, the following vulnerability has been resolved: crypto: algif_skcipher - force

CVE-2024-13784 - The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to

CVE-2026-2497 - The Gallery by BestWebSoft plugin for WordPress is vulnerable to SQL Injection via the '_gallery_ord

CVE-2026-2357 - The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plug

CVE-2026-18347 - The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable t

CVE-2026-17608 - The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cro

CVE-2026-17604 - The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable t

CVE-2026-17087 - The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerab

CVE-2026-13424 - The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to

CVE-2026-12998 - The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vuln

CVE-2026-10734 - The Infility Global plugin for WordPress is vulnerable to Stored Cross-Site Scripting via /cf7_recor

CVE-2026-9767 - The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to generic S

CVE-2026-2283 - The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blog_id' paramet

CVE-2026-19934 - A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unkno

CVE-2026-19728 - The Extra Product Options Builder for WooCommerce WordPress plugin before 1.2.176 does not verify th

CVE-2026-19726 - The Visualizer WordPress plugin before 4.0.7 does not properly authorise access to the configuratio

CVE-2026-19725 - The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 does not sanitise a value

CVE-2026-19717 - The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisat

CVE-2026-19714 - The Simple JWT Login WordPress plugin before 3.6.8 does not validate the audience of the Google ide

CVE-2026-19712 - The Masteriyo LMS WordPress plugin before 2.3.3 does not sanitise and escape a quiz field before ou

CVE-2026-19711 - The Premium Packages WordPress plugin before 7.0.7 does not validate a withdrawal request against t

CVE-2026-19613 - The ECS WordPress plugin before 4.3.10 does not perform ownership or post-status checks when one of

CVE-2026-18653 - The WP Directory Kit WordPress plugin before 1.5.7 does not sanitise and escape a parameter before u

CVE-2026-18402 - The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cr

CVE-2026-18316 - The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data du

CVE-2026-17582 - The Slider Hero plugin for WordPress is vulnerable to second-order SQL Injection in versions up to,

CVE-2026-17581 - The WCPOS – Point of Sale (POS) plugin for WooCommerce plugin for WordPress is vulnerable to Code In

CVE-2026-17533 - The All-in-One WP Migration and Backup WordPress plugin before 7.108 does not restrict its migration

CVE-2026-16775 - The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulne

CVE-2026-16758 - The Snippet Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortco

CVE-2026-15790 - The Youtube Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions u

CVE-2026-15604 - The Toocheke Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions

CVE-2026-15384 - The Manual Image Crop WordPress plugin before 1.15 does not perform any capability check or nonce ve

CVE-2026-15351 - The WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors plugin for WordPr

CVE-2026-15345 - The ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization plugin for WordPress is vulnera

CVE-2026-15056 - The StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More plugin

CVE-2026-13712 - The Divi WordPress theme before 5.9.0 does not properly escape some of its Social Media Follow modul

CVE-2026-10035 - The Turnkey bbPress by WeaverTheme plugin for WordPress is vulnerable to PHP Object Injection in all

CVE-2026-19933 - A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0.

CVE-2026-19932 - A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects

CVE-2026-18432 - The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all v

CVE-2026-18385 - The The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restri

CVE-2026-17123 - The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in vers

CVE-2026-16779 - The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions

CVE-2026-16099 - The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file deletion due to i

CVE-2026-16098 - The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in all version

CVE-2026-16079 - The Fullscreen Galleria plugin for WordPress is vulnerable to generic SQL Injection via 'href' Attri

CVE-2026-15963 - The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to

CVE-2026-15726 - The Serious Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'theme' Sho

CVE-2026-15602 - The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQ

CVE-2026-15441 - The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to, and

CVE-2026-15066 - The Loco Translate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PO File Ext

CVE-2026-15009 - The Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution plugin

CVE-2026-15002 - The Platnosci Online Blue Media (Autopay) plugin for WordPress is vulnerable to Stored Cross-Site Sc

CVE-2026-14524 - The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file deletion due to insuf

CVE-2026-14498 - The Query Wrangler plugin for WordPress is vulnerable to Remote Code Execution in all versions up to

CVE-2026-13358 - The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress

CVE-2026-13167 - The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin fo

CVE-2026-12905 - The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to,

CVE-2026-12477 - The Gravity Booster – Styles & Layouts for Gravity Forms plugin for WordPress is vulnerable to Store

CVE-2026-11780 - The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to

CVE-2025-10005 - The PPWP – Password Protect WordPress | #1 Most-Reviewed Password Plugin plugin for WordPress is vul

CVE-2026-2487 - The Admin Custom Login plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin s

CVE-2026-19930 - A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the

CVE-2026-19929 - A vulnerability was identified in OpenBoxes up to 0.9.6. This impacts the function buildZebraTemplat

CVE-2026-19928 - A vulnerability was determined in OpenBoxes up to 0.9.7. This affects the function needManager of th

CVE-2026-19927 - A vulnerability was found in OpenBoxes up to 0.9.7. The impacted element is the function Upload of t

CVE-2026-19926 - A vulnerability has been found in Evergreen up to 3.14.11/3.15.11/3.16.5/3.17-beta1. The affected el

CVE-2026-19925 - A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some

CVE-2026-19924 - A security vulnerability has been detected in Tenda AC10 16.03.10.09_multi_TDE01. This vulnerability

CVE-2026-19923 - A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown

CVE-2026-19922 - A security flaw has been discovered in code-projects Online Shopping System 1.0. Affected by this is

CVE-2026-19921 - A vulnerability was identified in code-projects Online Shopping System 1.0. Affected by this vulnera

CVE-2026-19920 - A vulnerability was determined in code-projects Online Shopping System 1.0. Affected is an unknown f

CVE-2026-19919 - A vulnerability was found in code-projects Online Shopping System 1.0. This impacts an unknown funct

CVE-2026-19918 - A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects th

CVE-2026-19917 - A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unkn

CVE-2026-74767 - Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) fi

CVE-2026-74764 - Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When pr

CVE-2026-73055 - Shescape before 2.1.15 (and 3.0.0 before 3.0.2) fails to properly escape tilde (~) characters in ass

CVE-2026-73054 - SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoi

CVE-2026-73053 - SiYuan versions before v3.7.4 contain a cross-site scripting vulnerability in the unicode2Emoji func

CVE-2026-73052 - SiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates them d

CVE-2026-73050 - SiYuan versions before v3.7.4 fail to validate or escape the color field in attribute-view select op

CVE-2026-73047 - siyuan versions <= 3.7.3 (fixed in v3.7.4) contain a server-side template injection vulnerability in

CVE-2026-73046 - SiYuan before v3.7.4 improperly restricts excessive authentication attempts in the CheckAuth() middl

CVE-2026-73045 - SiYuan before 3.7.4 contains an improper restriction of excessive authentication attempts vulnerabil

CVE-2026-73044 - SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing stored

CVE-2026-73043 - SiYuan versions before v3.7.4 contain a remote code execution vulnerability in the Template calculat

CVE-2026-73042 - SiYuan before v3.7.4 fails to properly escape database menu metadata in HTML interpolation, allowing

CVE-2026-73041 - SiYuan versions before v3.7.4 fail to validate or escape annotation fields written to disk by the se

CVE-2026-19916 - A vulnerability was detected in code-projects Online Food Order System 1.0. The affected element is

CVE-2026-19906 - A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the func

CVE-2026-19905 - A weakness has been identified in Jinher OA 1.0. Impacted is an unknown function of the file /C6/JHS

CVE-2026-18855 - The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient f

CVE-2026-19904 - A vulnerability was found in SourceCodester Online Book Store System 1.0. This vulnerability affects

CVE-2026-19903 - A vulnerability has been found in SourceCodester Online Clothing Store 1.0. This affects an unknown

CVE-2026-19901 - A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown functi

CVE-2026-19598 - The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalatio

CVE-2026-19900 - A vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206. The impacted element is an unknown

CVE-2026-19899 - A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected

CVE-2026-19898 - A vulnerability was found in VictoriaMetrics up to 1.146.0. Impacted is the function requestHandler

CVE-2026-19897 - A vulnerability has been found in mangroup dtale up to 3.22.0. This issue affects the function Login

CVE-2026-19896 - A flaw has been found in mangroup dtale up to 3.22.0. This vulnerability affects the function build_

CVE-2026-19895 - A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This affects th

CVE-2026-19474 - @fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not

CVE-2026-18549 - @fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not

CVE-2026-18500 - @fastify/jwt is a JSON Web Token plugin for Fastify. In versions before 10.2.2, a per-request verifi

CVE-2026-18165 - @fastify/oauth2 is an OAuth 2.0 plugin for Fastify. In versions from 7.2.0 up to but not including 8

CVE-2026-15689 - Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisonin

CVE-2026-74577 - In the Linux kernel, the following vulnerability has been resolved: net: mpls: initialize rtm_tos i

CVE-2026-74576 - In the Linux kernel, the following vulnerability has been resolved: mm/slab: prevent unbounded recu

CVE-2026-74575 - In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Prevent XDomain de

CVE-2026-74574 - In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix fdev setup

CVE-2026-74573 - In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3-iommufd: Requ

CVE-2026-74572 - In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix deadlock betw

CVE-2026-74571 - In the Linux kernel, the following vulnerability has been resolved: btrfs: skip global block reserv

CVE-2026-74570 - In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc si

CVE-2026-74569 - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: wi

CVE-2026-74568 - In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Fix race betw

CVE-2026-74567 - In the Linux kernel, the following vulnerability has been resolved: keys: fix out-of-bounds read in

CVE-2026-74566 - In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk by

CVE-2026-74565 - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: make nft_

CVE-2026-74564 - In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_hashlimit: valida

CVE-2026-74563 - In the Linux kernel, the following vulnerability has been resolved: rds: tcp: hold the RCU lock acr

CVE-2026-74562 - In the Linux kernel, the following vulnerability has been resolved: nexthop: take nh->lock for f6i_

CVE-2026-74561 - In the Linux kernel, the following vulnerability has been resolved: nexthop: avoid unlocked f6i_lis

CVE-2026-74560 - In the Linux kernel, the following vulnerability has been resolved: xsk: fix buffer leak in xsk_dro

CVE-2026-74559 - In the Linux kernel, the following vulnerability has been resolved: xsk: drain continuation descs a

CVE-2026-74558 - In the Linux kernel, the following vulnerability has been resolved: xsk: reclaim invalid Tx descrip

CVE-2026-74557 - In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Fix stale-data

CVE-2026-74556 - In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi_tcp: Bound SCSI

CVE-2026-74555 - In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix HA resume dea

CVE-2026-74554 - In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bounds

CVE-2026-74553 - In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775-core) Fix numbe

CVE-2026-74552 - In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Only report alarm

CVE-2026-74551 - In the Linux kernel, the following vulnerability has been resolved: hwmon: (nzxt-smart2) DMA-align

CVE-2026-74550 - In the Linux kernel, the following vulnerability has been resolved: net: do not send ICMP/NDISC Red

CVE-2026-74549 - In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775-core) Prevent a

CVE-2026-74548 - In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix UAF of txrx_stat

CVE-2026-74547 - In the Linux kernel, the following vulnerability has been resolved: hwmon: (adt7470) Fix busy-loop

CVE-2026-74546 - In the Linux kernel, the following vulnerability has been resolved: hwmon: (adt7470) Fix divide-by-

CVE-2026-74545 - In the Linux kernel, the following vulnerability has been resolved: rtase: fix double free of multi

CVE-2026-74544 - In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: validate of

CVE-2026-74543 - In the Linux kernel, the following vulnerability has been resolved: net: udp_tunnel: fix memory lea

CVE-2026-74542 - In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio_queue ENOMEM i

CVE-2026-74541 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: clear iso_data

CVE-2026-74540 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix UAF in l2

CVE-2026-74539 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso_

CVE-2026-74538 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso_

CVE-2026-74537 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: hold sk properl

CVE-2026-74536 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix leaking sk

CVE-2026-74535 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: avoid deadlocks

CVE-2026-74534 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix refcounting

CVE-2026-74533 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix race of kfr

CVE-2026-74532 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Validate le

CVE-2026-74531 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: hold conn

CVE-2026-74530 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn

CVE-2026-74529 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn

CVE-2026-74528 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn

CVE-2026-74527 - In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from cl

CVE-2026-74526 - In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix potential dea

CVE-2026-74525 - In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX

CVE-2026-74524 - In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix out-of-bounds pa

CVE-2026-74523 - In the Linux kernel, the following vulnerability has been resolved: qede: sync udp_tunnel ports out

CVE-2026-74522 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __

CVE-2026-74521 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: use memcmp() to compare

CVE-2026-74520 - In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix IOPF group o

CVE-2026-74519 - In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free

CVE-2026-74518 - In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix list corruption

CVE-2026-74517 - In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Cancel delayed I/O AP

CVE-2026-74516 - In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR int

CVE-2026-74515 - In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Reject adapter

CVE-2026-74514 - In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix memory acco

CVE-2026-74513 - In the Linux kernel, the following vulnerability has been resolved: dibs: fix use-after-free of dmb

CVE-2026-74512 - In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-

CVE-2026-74511 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-74510 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix UAF in pai

CVE-2026-74509 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix advert

CVE-2026-74508 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: reject frames

CVE-2026-74507 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: validate numbe

CVE-2026-74506 - In the Linux kernel, the following vulnerability has been resolved: afs: Fix UAF when sending a mes

CVE-2026-74505 - In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error h

CVE-2026-74504 - In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix division by zero

CVE-2026-74503 - In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Clear SNDRV_TIMER_

CVE-2026-74502 - In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: fix double free of o

CVE-2026-74501 - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix use-after-

CVE-2026-74500 - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix stack info

CVE-2026-74499 - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write

CVE-2026-74498 - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix DMA buffer

CVE-2026-74497 - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp frame si

CVE-2026-74496 - In the Linux kernel, the following vulnerability has been resolved: fou: Fix use-after-free in fou_

CVE-2026-74495 - In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error